office-malware-analyzer

What problem does it solve?

Automatically analyzes Office documents (Word, Excel, PowerPoint, WPS, OneNote) to identify malicious features such as VBA/XLM macros, DDE, template injections, and embedded payloads, enabling faster threat triage and containment.

Core Features & Use Cases

• VBA macro analysis with deobfuscation and VBA stomping detection.
• OOXML/ODF/RTF analysis for external links, embedded objects, DDE, EPS, and CVE indicators.
• IOC extraction including URLs, IPs, and domains, with risk scoring and MITRE ATT&CK mapping.
• Use Case: A security team processes a batch of Office documents to generate detailed risk reports and actionable indicators for incident response.

Quick Start

Run the Office malware analyzer on a suspicious document to generate a comprehensive report.